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1 . (currently amended) A computer-implemented method for digitally signing data, comprising: 
generating a lattice having at least one short basis establishing a private key and at least 
one long basis establishing a public key; 

mapping at least the message or a concatenation thereof to a message point "x" in n- 
dimensional space using a function 'T rendering infeasible the possibility of mapping two messages 
together in the space; and 

using the short basis, finding a lattice point ''y" of the lattice £6 that is close to the message 
point "x". 

2. (original) The method of Claim 1 , farther comprising remming at least the message point "x" 
and the lattice point "y" as a digital signanire. 

3. (original) The method of Oaim 2, further comprising randomizing the function "f \ 

4. (original) The method of Claim 3, wherein the function 'T is randomized by concatenating 
the message fi with a random number p. 

5. (original) The method of Claim 1, wherein die function maps the message fx to a poim 
on a grid. 

6. (original) The method of Claim 5, wherein the function is collision intractable, 
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7. (original) The method of Claim 6, wherein the collision intractability of the function "F 
derived from the hardness of lattice problems. 



IS 



8. (original) The method of Claim 5, wherein the function "f h not collision intractable. 

9. (original) The method of Oaim 1. wherein the funcUon maps at least the message to a 
point on an auxiliai7 lattice. 

10. (original) The method of Claim L farther comprising verifying a digital signature at least in 
part by determining whether a difference between the lattice point "y" and the message point "x" is no more 
than a predetermined distance. 

It (original) The method of Claim 10, wherein the predetermined distance is related to the 
number of dinniensions in the lattice X, 

12. (currently amended) A computer program storage device including a program of instmctions 
for generating a digital signature for a message, the program of instmctions including: 

computer readable code means for mapping a message m or a concatenation thereof to a 
message point ^^x" in n-dimensional space, the message point "x^' being a poim of a grid or a point 
of an auxiliary lattice; 
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computer readable code means for findirg a point "y" of a key lattice iE that is rot the s.m. 
as the auxiliary latticfi that is noorby th n mospogo p u iiu "a" ; and. 

computer readable code means for establishing a digital signature, based at least on the points 
"x" and "y". 

13. (original) The computer progratn storage device of Claim 12. wherein the means for mapping 
uses a function 'T rendering infeasiblc the possibility of mapping two messages close together in the space, 
and wherein the means for finding includes using a hard to find short basis of the key lattice ^. 

14. (original) The computer program storage device of Claim 13, further comprising means for 
randomizing the function "f". 

15. (original) The computer program storage device of Claim 14, wherein the function "f ' is 
randomized by concatenating the message ii with a random number p. 

1 6. (original) The computer program .storage device of Claim 1 2, wherein the function "f ' maps 
the message ^ to a point on a grid, and wherein the fi^nction T is collision intractable, the coUision 
intractability being derived from the hardness of lattice problems. 



17. (original) The computer program storage device of Claim 12, wherein the function 'T is 
collision intractable. 



not 
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18- (original) The computer program storage device of Claim 13, wherein the function "f ' maps 
at least the message to a point on an auxiliary lattice. 

19. (currently amended) A computer system for generating a digital signature of a message 
comprising: 

at least one sender computer including logic for executing method steps including: 

mapping the message ^ to a message point "^x" at which it is not feasible to map any 
other message; 

finding a lattice point "y" that ic rolativoly doge to the megoQfio point "x" ; and 
transmitting at least the message /* and tlie points "x" and "y"; 

at least one receiver computer receiving the message fi and points "x^ and "y'' and including 
logic for executing method steps including: 

determining whether a distance between the points "x" and "y" is related in a 

predetermined way to a predetermined distance, and based thereon determining whether the 

message /i has been properly signed. 



20. (original) The system of Claim 19, wherein the mapping act is undertaken using a fiinction 
T' that maps the message point "x" to a point of a grid or of an auxiliary lattice, and ftirther wherein the 
lattice point "y " is a meii^ber of a lattice iC, and the finding act is undertaken using a hard-to-fmd short basis 
of the lattice 56. 



iaia.73.AMD 



PAGE 5113' RCVD. AT 3/6/2004 11:56:27 AM [Eastern Standard Time] * SVR:USPTO{FXRF-1/0 ' DNIS:8729306' CSID:6193388078* DURATION (inin-ss):03-0(l 



03/06/2004 10:13 6193388078 



R06IT2&ASS0CIATI 



f 



PAGE 06 



CASE NO.: AM9-9WH38 
Serial No.: r>9/487,502 
March 6, 2004 
Page 6 



PATENT 
Filed: January 19, 2000 



21 . (original) The system of Claim 20, wherein the acts undertaken by the logic of the sender 
computer furtlier comprise randomizing the function "f by concatenating the message fi with a random 
number p. 

22. (original) The system of Claim 20, wherein the fisnction is collision intractable. 

23. (original) The system of Claim 22, wherein the collision intractability of the function T is 
derived from die hardness of lattice problems. 

24. (original) The system of Claim 20, wherein the function T is not collision intractable. 

25. (original) The system of Claim 20. wherein the predetermined distance is related to the 
number "r" of dimensions in the lattice SB. 

26. (currently aitiended) A computer-implemented method for digitally signing data, comprising: 
generating a lattice i£ having at least one short basis and at least one long basis; 
mapping at least the message ai or a concatenation thereof to a message point "x" in n- 

dimensional space, the message point '^x" being an element of a set of spaced-apart points not on die 
lattice ; and 



using the short basis, finding a lattice point "y" of tlie lattice Se feat in cloco to cho 
point "x\ 



in e ssflge 
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27. (original) The method of CJaim 26, wherein tiie mapping is undertaken using a function "f ' . 

28- (original) The method of Claim 27, further comprising randomizing the function "r by 
concatenating the message ^ with a random number p. 



29. (original) The method of Claim 27, wherein the i\mction "f maps the message to a point 



on a grid. 



30. (original) The method of Claim 29, wherein the function is collision intractable. 



3 1 . (original) The method of Claim 30, wherein the collision intractability of die function "f" 
derived from the hardness of lattice problems. 



IS 



32. (original) The itiethod of Claim 29, wherein the function "f is not collision i 



mcractable. 



33. (original) The method of Claim 27, whercm the function *T 
point on an auxiliary lattice. 



maps at least the message to a 



34. (original) The methcxl of Claim 26, further comprising verifying a digital signature at least 
in part by determining whether a differ^ce between the lattice point "y" and the message point "x" is no 



more than a predeterjnined distance. 
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35. (original) The method of Claim 34, wherein the predetermined distance is related to the 
number of dimensions in the lattice ^. 
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